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DETAILED ACTION 

Response to Amendment 

1. Examiner acknowledges receipt of the amendment in response to the office 
action dated 08/22/2005, which amendment was received 10/31/2005. At this point, 
claims 25-27 and 29-30 have been amended. Thus, claims 25-30 are currently pending 
in the application. 

Objections to the disclosure 

2. In response to amendment, the objection to the drawings is withdrawn. 

Claim Rejections - 35 USC $112 and 102 

3. In response to amendment, the 35 USC § 1 12 rejection of claim 25 is withdrawn. 

4. In response to amendment, the 35 USC § 102 rejections of claims 25-30 are 
withdrawn. 

Response to Arguments 

5. Applicant's arguments filed 10/31/2005 with respect to the 35 USC § 102 
rejections of claims 25-30 by Vahalia have been fully considered, and are persuasive. 
Applicants point out that the LUN security function of Vahalia is physically located in the 
management computer (i.e., display and keyboard server 28, Fig. 9). The claims as 
amended physically place the LUN security function in the storage subsystem. 
Therefore, the rejection is withdrawn. However, see the new rejections below. 

Claim Rejections - 35 USC § 103 
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6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 25-30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Vahalia, US 6,275,953 B1 in view of Yachida, US 5,802,591. 

8. Vahalia discloses limitations of claim 25, including: 

• In a clustering system (Col. 12, lines 45-48) having primary and secondary host 
computers (data movers, Fig. 7; Col. 13, lines 5-12) coupled to a storage system 
(23, Fig. 7) and a management computer (28, Fig. 9), wherein each of a plurality 
of logical units in the storage system is configured so that a logical unit in the 
storage system can be accessed only by a predetermined host computer (See 
Fig. 7 and Col. 12, lines 36-45; LUNs 81-83 are accessible by designated host 
data movers 84-86), a method comprising: 

o storing access control information in the storage system for enabling a 

primary host computer to access a first logical unit; and 
o changing access control information in the storage system (See Figs. 10- 
1 3, esp. F. 1 1 , Data Mover Owner; Col. 1 3, lines 4-1 0) for enabling a 
secondary host computer to access the first logical unit based upon a 
request from the management computer (Figs. 22-23, esp. 245, F.23, 
where setting the network address enables access; See also Col. 23, lines 
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26-37; the methods of F.22-23 are performed by the management 
computer); wherein 

o the request from the management computer is issued when taking over, at 
the secondary host computer, processing of the primary host computer 
(Figs. 22-23). 

9. Vahalia does not expressly disclose that the LUN Security function is physically 
located in the storage subsystem. 

10. However, Yachida discloses a system having a host computer (2, Fig. 1) that 
accesses a storage system (22, Fig. 1). In his system, there is a LUN security function, 
which is located in the storage system. See Fig. 2. The LUN security function is used 
in a manner similar to that of Vahalia and the instant application, namely to allow or 
disallow access requests to the data of the storage system based on permission data. 
The security function further receives a request for changing access control information 
to allow a formerly disallowed access and changes the access information so that 
subsequent requests would allow the access. See Fig. 2; also 57, Fig. 3, and Col. 4, 
lines 54-58, Col. 4, line 66 to Col. 5, line 5. 

1 1 . Vahalia and Yachida are analogous art because they are from the same area of 
endeavor, namely security for storage systems. 

12. At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to modify the system of Vahalia by placing the security function on the 
storage system instead of the data movers. 
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13. The motivation for doing so is taught by Yachida in Col. 1 , lines 1 0-35, namely 
that if general access is accidentally granted by the host, the security of the system is 
compromised. (For example, if someone was able to log in to the host with or otherwise 
gain administrative privileges). Therefore, Yachida moves the security function to the 
storage system. 

14. Therefore, it would have been obvious to combine Vahalia with Yachida for the 
benefit of added security, to obtain the invention as specified in claim 25. 

15. As for Claim 26, Vahalia additionally teaches: 

• the request from the management computer is issued after the secondary host 
computer gains ownership of the first logical unit (244, Fig. 23 gains ownership; 
245 allows access). 

16. As for Claims 27-28, Vahalia additionally teaches: 

• the secondary host computer gains ownership of the first logical unit when 
detecting a change of condition in the primary host computer, wherein the 
condition comprises a fault condition (232-236, Fig. 22); 

17. As for Claim 29, Vahalia teaches: 

• In a storage system (23, Fig. 7 ) coupled to at least a primary host computer (91 , 
Fig. 7) and a secondary host computer (92, Fig. 7) and a management computer 
(28, Fig. 9), the system including a LUN security function (see, for instance, 104, 
Fig. 9) therein so that a predetermined host computer of the plurality of host 
computers which include the primary host computer and the secondary host 
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computer can access at least one of a plurality of logical units (81-83, Fig. 7; Figs 

10-13), a method comprising: 

o managing access control in the storage system so that the storage system 
permits access to the logical unit from a predetermined host computer and 
denies access to the logical unit from the secondary host computer (Col. 
13, lines 4-12); 

o and changing the access control so that the storage system permits 
access to the logical unit from the secondary host computer based upon a 
request from the management computer when the secondary host 
computer takes over processing of the primary host computer (Figs. 22- 
23). 

18. Vahalia does not disclose that the LUN Security function is physically located in 
the storage subsystem, instead teaching that the LUN security function of is physically 
located in the management computer (i.e., display and keyboard server 28, Fig. 9). 

19. However, Yachida discloses a system having a host computer (2, Fig. 1) that 
accesses a storage system (22, Fig. 1). In his system, there is a LUN security function, 
which is located in the storage system. See Fig. 2. The LUN security function is used 
in a manner similar to that of Vahalia and the instant application, namely to allow or 
disallow access requests to the data of the storage system based on permission data. 
The security function further receives a request for changing access control information 
to allow a formerly disallowed access and changes the access information so that 
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subsequent requests would allow the access. See Fig. 2; also 57, Fig. 3, and Col. 4, 
lines 54-58, Col. 4, line 66 to Col. 5, line 5. 

20. Vahalia and Yachida are analogous art because they are from the same area of 
endeavor, namely security for storage systems. 

21 . At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to modify the system of Vahalia by placing the security function on the 
storage system instead of the data movers. 

22. The motivation for doing so is taught by Yachida in Col. 1 , lines 10-35, namely 
that if general access is accidentally granted by the host, the security of the system is 
compromised. (For example, if someone was able to log in to the host with or otherwise 
gain administrative privileges). Therefore, Yachida moves the security function to the 
storage system. 

23. Therefore, it would have been obvious to combine Vahalia with Yachida for the 
benefit of added security, to obtain the invention as specified in claim 29. 

24. As for Claim 30, Vahalia additionally teaches: 

• changing the access control so that the storage system denies access to the 
logical unit from the primary host computer when the secondary host computer 
takes over processing of the primary host computer (See Col. 13, lines 4-12; the 
system uses exclusive ownership; however, at 233, 236, Fig. 22, the exclusive 
ownership is set to the secondary host, which will deny access attempts from the 
primary host). 
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Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jesse Diller whose telephone number is (571) 272- 
4173. The examiner can normally be reached on 8:30AM-5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Donald Sparks can be reached on (571) 272-4201. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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